chore: update the prod sandbox config

bcgov · Jul 10, 2024 · 35bfe02 · 35bfe02
1 parent 178bc21
commit 35bfe02
Show file tree

Hide file tree

Showing 4 changed files with 45 additions and 33 deletions.
diff --git a/transition-scripts/values/e4ca1d/prod/values-gold-e4ca1d-prod-active.yaml b/transition-scripts/values/e4ca1d/prod/values-gold-e4ca1d-prod-active.yaml
@@ -1,16 +1,20 @@
-image:
-  repository: ghcr.io/bcgov/sso
-  tag: 7.6.39-build.2
-  pullPolicy: IfNotPresent
-
 replicaCount: 2
 
-service:
-  type: ClusterIP
-  port: 8443
-
-tls:
-  enabled: true
+additionalServerOptions: >-
+  -Dkeycloak.profile.feature.impersonation=disabled
+  -Djboss.persistent.log.dir=/var/log/eap
+  -Djgroups.dns.query=sso-keycloak-ping.e4ca1d-prod.svc.cluster.local
+
+extraEnvs:
+  - name: KC_HOSTNAME_URL
+    value: https://sandbox.loginproxy.gov.bc.ca/auth/
+  - name: KC_HOSTNAME_ADMIN_URL
+    value: https://sandbox.loginproxy.gov.bc.ca/auth/
+  ## If debugging needs to be done without the use of the vanity urls, use the following KC_HOSTNAMES
+  # - name: KC_HOSTNAME_URL
+  #   value: https://sso-keycloak-e4ca1d-prod.apps.gold.devops.gov.bc.ca/auth/
+  # - name: KC_HOSTNAME_ADMIN_URL
+  #   value: https://sso-keycloak-e4ca1d-prod.apps.gold.devops.gov.bc.ca/auth/
 
 resources:
   limits:

diff --git a/transition-scripts/values/e4ca1d/prod/values-gold-e4ca1d-prod-standby.yaml b/transition-scripts/values/e4ca1d/prod/values-gold-e4ca1d-prod-standby.yaml
@@ -1,16 +1,20 @@
-image:
-  repository: ghcr.io/bcgov/sso
-  tag: 7.6.39-build.2
-  pullPolicy: IfNotPresent
-
 replicaCount: 0
 
-service:
-  type: ClusterIP
-  port: 8443
-
-tls:
-  enabled: false
+additionalServerOptions: >-
+  -Dkeycloak.profile.feature.impersonation=disabled
+  -Djboss.persistent.log.dir=/var/log/eap
+  -Djgroups.dns.query=sso-keycloak-ping.e4ca1d-prod.svc.cluster.local
+
+extraEnvs:
+  - name: KC_HOSTNAME_URL
+    value: https://sandbox.loginproxy.gov.bc.ca/auth/
+  - name: KC_HOSTNAME_ADMIN_URL
+    value: https://sandbox.loginproxy.gov.bc.ca/auth/
+  ## If debugging needs to be done without the use of the vanity urls, use the following KC_HOSTNAMES
+  # - name: KC_HOSTNAME_URL
+  #   value: https://sso-keycloak-e4ca1d-prod.apps.gold.devops.gov.bc.ca/auth/
+  # - name: KC_HOSTNAME_ADMIN_URL
+  #   value: https://sso-keycloak-e4ca1d-prod.apps.gold.devops.gov.bc.ca/auth/
 
 resources:
   limits:

diff --git a/transition-scripts/values/e4ca1d/prod/values-golddr-e4ca1d-prod-active.yaml b/transition-scripts/values/e4ca1d/prod/values-golddr-e4ca1d-prod-active.yaml
@@ -1,16 +1,20 @@
-image:
-  repository: ghcr.io/bcgov/sso
-  tag: 7.6.39-build.2
-  pullPolicy: IfNotPresent
-
 replicaCount: 2
 
-service:
-  type: ClusterIP
-  port: 8443
-
-tls:
-  enabled: true
+additionalServerOptions: >-
+  -Dkeycloak.profile.feature.impersonation=disabled
+  -Djboss.persistent.log.dir=/var/log/eap
+  -Djgroups.dns.query=sso-keycloak-ping.e4ca1d-prod.svc.cluster.local
+
+extraEnvs:
+  - name: KC_HOSTNAME_URL
+    value: https://sandbox.loginproxy.gov.bc.ca/auth/
+  - name: KC_HOSTNAME_ADMIN_URL
+    value: https://sandbox.loginproxy.gov.bc.ca/auth/
+  ## If debugging needs to be done without the use of the vanity urls, use the following KC_HOSTNAMES
+  # - name: KC_HOSTNAME_URL
+  #   value: https://sso-keycloak-e4ca1d-prod.apps.golddr.devops.gov.bc.ca/auth/
+  # - name: KC_HOSTNAME_ADMIN_URL
+  #   value: https://sso-keycloak-e4ca1d-prod.apps.golddr.devops.gov.bc.ca/auth/
 
 resources:
   limits:

diff --git a/...rod/values-golddr-e4ca1d-dev-standby.yaml → ...od/values-golddr-e4ca1d-prod-standby.yaml b/...rod/values-golddr-e4ca1d-dev-standby.yaml → ...od/values-golddr-e4ca1d-prod-standby.yaml